This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/323830333a616165303a3a2f33322d3438203d3e20323637363834.roa
File: 323830333a616165303a3a2f33322d3438203d3e20323637363834.roa (raw, json)
Hash identifier: cfvH069e3q23iAKptC12Sbt/UjIzaBSX+QLBkN+5Epw=
Subject key identifier: B3:53:75:69:E5:11:BC:DD:6D:BB:85:15:63:76:E5:B1:49:A7:A4:62
Certificate issuer: /CN=98B8039082392EEC18A02E434A8730B491087BE7
Certificate serial: 48549DD5B7E753F092E67C20854875BDB737BE44
Authority key identifier: 98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/323830333a616165303a3a2f33322d3438203d3e20323637363834.roa
Signing time: Tue 06 Jan 2026 19:39:33 +0000
ROA not before: Tue 06 Jan 2026 19:34:33 +0000
ROA not after: Tue 05 Jan 2027 19:39:33 +0000
asID: 267684
IP address blocks: 2803:aae0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl
rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:54:9d:d5:b7:e7:53:f0:92:e6:7c:20:85:48:75:bd:b7:37:be:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98B8039082392EEC18A02E434A8730B491087BE7
Validity
Not Before: Jan 6 19:34:33 2026 GMT
Not After : Jan 5 19:39:33 2027 GMT
Subject: CN=B3537569E511BCDD6DBB85156376E5B149A7A462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:b4:ed:d5:a8:96:43:6d:8d:62:c3:27:83:
aa:e1:32:26:fb:2b:4d:33:1d:e8:71:b1:88:d3:2b:
e8:6d:d5:dd:fb:2d:a9:d9:4a:27:23:9b:68:d4:03:
2b:c0:99:33:fa:d7:13:40:e0:aa:fe:e3:77:d6:31:
7c:f7:fa:93:d5:d3:81:f0:8f:f5:eb:e1:99:a6:db:
b6:d8:23:0c:72:48:ed:6c:72:d4:42:17:34:01:bd:
15:c4:bf:55:6b:f4:a7:16:a1:80:f5:18:b0:e1:9f:
a4:22:08:ce:1c:af:eb:3f:be:a1:49:92:13:2e:b8:
0d:e3:bd:73:72:6f:4e:18:76:4e:b4:bc:00:3b:d7:
5b:26:ee:dd:6a:f0:00:1c:8b:8a:84:58:38:e2:c8:
83:b4:11:02:9e:a2:7b:f8:64:09:14:eb:3d:c0:bf:
22:b7:24:1f:52:6f:2d:a6:f0:15:2d:57:dc:6c:4a:
54:c7:58:30:0e:96:22:af:24:73:fa:74:33:7a:15:
2f:79:bc:ec:96:56:45:f9:e9:0e:ab:06:86:d6:50:
02:06:17:61:06:b1:79:a6:37:20:38:e8:6f:3d:25:
58:72:97:15:8c:14:05:e5:ae:ca:a4:5b:ea:1f:37:
2e:e2:a1:b7:87:7f:f0:c9:0f:9c:1e:24:ad:9e:6f:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:75:69:E5:11:BC:DD:6D:BB:85:15:63:76:E5:B1:49:A7:A4:62
X509v3 Authority Key Identifier:
keyid:98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/323830333a616165303a3a2f33322d3438203d3e20323637363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:aae0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:5a:3f:9d:43:4b:b6:44:89:cf:34:0c:97:31:4e:27:7a:fe:
ba:22:a2:6e:c3:46:55:cd:38:7e:a4:0f:06:83:ad:3d:d2:ef:
76:90:d1:5d:5d:d1:41:e0:e4:a5:f1:b6:3e:cc:f6:71:7b:65:
0f:9e:7b:e4:d5:8e:c6:39:88:be:f7:8d:15:df:bf:17:46:e6:
5c:c7:e9:ff:ec:44:4c:14:a2:9d:02:b3:87:ae:b3:fd:dc:e7:
17:5d:01:98:14:59:5b:0f:cc:50:f5:1a:70:eb:08:d9:f4:d6:
d8:94:92:f4:d0:15:16:ec:f6:01:f0:75:cf:46:4b:a2:c0:e8:
06:39:aa:b5:f5:64:1d:2b:8d:77:46:c9:09:52:5b:75:0f:1f:
c7:f8:6a:05:72:11:b5:14:bb:c7:d2:2a:ce:cf:02:66:c4:2c:
8f:52:2a:5b:5f:31:40:aa:78:01:7e:6d:3a:42:ae:93:15:43:
20:9a:83:a5:a7:21:63:2d:d2:70:71:ca:a4:b1:b0:b5:63:fb:
a2:14:e2:ea:87:24:14:a4:4b:2e:55:56:94:39:67:6a:b9:a5:
25:99:68:51:11:a9:e8:c4:76:83:1c:0d:e9:d3:89:95:5a:e6:
b7:eb:01:66:94:a2:0f:0d:63:02:2b:e3:fa:7b:32:69:49:ed:
8a:c5:d9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:36:41 2026 by rpki-client